gpp_maybe
Security update for sudo
SUSE-SLE-SAP-12-SP1-2019-2668
This update for sudo provides the following fix: Security issue fixed: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). Other issues fixed: - Cache resolved group names as calling getgrgid() is expensive and on systems connected to AD with many users, groups or sudo rules it causes sudo to take a long time to run (bsc#1068003). - Disable insults by default at build time. For new installations this was done via sudoers file, but when upgrading from previous versions it would accidentally be enabled (bsc#1053911). - Enable support for zlib compressed I/O logs (bsc#1058297).
-
Release DateOct 15 2019
-
References
-
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64
-
Packages
SUSE Linux Enterprise Server for SAP Applications 12.1 ppc64le
-
Packages